Known Exploited Vulnerabilities (KEV)

ID Title Severity CVSS EPSS Source Updated
cve-2026-82329 JFrog Artifactory Improper Authentication Vulnerability CRITICAL 9.8 7.67% cvelistv5 2026-09-02
cve-2026-59822 BerriAI LiteLLM Improper Authentication Vulnerability HIGH N/A 0.87% cvelistv5 2026-09-02
cve-2026-49869 Kestra OSS OS Command Injection Vulnerability CRITICAL 10.0 1.92% cvelistv5 2026-09-02
cve-2026-48710 Kludex Starlette HTTP Request/Response Smuggling Vulnerability HIGH N/A 36.26% cvelistv5 2026-09-02
cve-2026-82078 PaperCut NG/MF Unsafe Reflection Vulnerability HIGH N/A 3.57% cvelistv5 2026-08-31
cve-2026-81578 PaperCut NG/MF Missing Authentication for Critical Function Vulnerability HIGH N/A 3.29% cvelistv5 2026-08-31
cve-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability MEDIUM 5.3 0.58% cvelistv5 2026-08-27
cve-2026-53362 kernel: kernel: ipv6 frag escape HIGH 7.8 0.51% cvelistv5 2026-08-28
cve-2023-49105 ownCloud Improper Authentication Vulnerability CRITICAL 9.8 43.20% cvelistv5 2026-08-27
cve-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability HIGH 8.8 1.61% cvelistv5 2026-08-26
cve-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability HIGH N/A 9.44% cvelistv5 2026-08-26
cve-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability HIGH 8.1 83.63% cvelistv5 2026-08-26
cve-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability HIGH 8.8 52.84% cvelistv5 2026-08-26
cve-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability HIGH N/A 4.96% cvelistv5 2026-08-26
cve-2015-3246 Red Hat Libuser Race Condition Vulnerability HIGH N/A 8.80% cvelistv5 2026-08-26
cve-2026-60004 Gitea Code Injection Vulnerability HIGH N/A 86.78% cvelistv5 2026-08-25
cve-2026-21962 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CRITICAL 10.0 42.48% cvelistv5 2026-08-24
cve-2026-73570 Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability HIGH 8.9 32.38% cvelistv5 2026-08-21
cve-2026-72530 TrueConf Server Code Injection Vulnerability CRITICAL 9.5 1.83% cvelistv5 2026-08-20
cve-2026-72529 TrueConf Server Missing Authentication for Critical Function Vulnerability CRITICAL 9.3 1.55% cvelistv5 2026-08-20
cve-2026-64849 MLflow Server-Side Request Forgery Vulnerability HIGH N/A 16.41% cvelistv5 2026-08-19
cve-2026-65400 Apple macOS Improper Authentication Vulnerability HIGH N/A 10.46% cvelistv5 2026-08-18
cve-2026-59310 Broadcom VMware vCenter Path Traversal Vulnerability CRITICAL N/A 50.38% cvelistv5 2026-08-18
cve-2026-55040 Microsoft SharePoint Weak Authentication Vulnerability CRITICAL 9.1 50.59% cvelistv5 2026-08-18
cve-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability CRITICAL 9.8 72.69% cvelistv5 2026-08-18
cve-2025-62593 Ray-Project Ray Code Injection Vulnerability HIGH N/A 16.89% cvelistv5 2026-08-17
cve-2026-72898 Metabase SQL Injection Vulnerability CRITICAL 10.0 94.22% cvelistv5 2026-08-11
cve-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability HIGH 7.0 6.18% cvelistv5 2026-08-11
cve-2026-20349 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability HIGH 8.6 2.21% cvelistv5 2026-08-11
cve-2026-8037 Progress LoadMaster Command Injection Vulnerability CRITICAL 9.6 99.57% cvelistv5 2026-08-07